Avira Free Security Suite File Writes Vulnerability [CVE-2019-11396]

The permissive access rights on the SoftwareUpdater folder (files / folders) are incompatible with the privileged file manipulation performed by the product.

Files can be created that can be used by an unprivileged user to obtain SYSTEM privileges. Arbitrary file creation can be achieved by abusing the SwuConfig.json file creation. An unprivileged user can replace these files by symbolic links to arbitrary files.

When an update occurs, a privileged service creates a file and sets its access rights, offering write access to the Everyone group in any directory.

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

Like this:

Related Posts

Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.